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Abstract 

In the paper "Relating Strong Behavioral Equivalences for Processes with Nondeterminism and Proba- 
bilities" to appear in TCS, we present a comparison of behavioral equivalences for nondeterministic and 
probabilistic processes. In particular, we consider strong trace, failure, testing, and bisimulation equiva- 
lences. For each of these groups of equivalences, we examine the discriminating power of three variants 
stemming from three approaches that differ for the way probabilities of events are compared when nonde- 
terministic choices are resolved via deterministic schedulers. The established relationships are summarized 
in a so-called spectrum. However, the equivalences we consider in that paper are only a small subset of 
those considered in the original spectrum of equivalences for nondeterministic systems introduced by Rob van 
Glabbeek. In this companion paper we we enlarge the spectrum by considering variants of trace equivalences 
(completed-trace equivalences), additional decorated-trace equivalences (failure-trace, readiness, and ready- 
trace equivalences), and variants of bisimulation equivalences (kernels of simulation, completed-simulation, 
failure-simulation, and ready-simulation preorders). Moreover, we study how the spectrum changes when 
randomized schedulers are used instead of deterministic ones. 

Keywords: bisimulation equivalence, simulation equivalence, testing equivalence, failure equivalence, trace 
equivalence, nondeterminism, probability 



1. Introduction 

In [1] a systematic account of the main known probabilistic equivalences for nondeterministic and prob- 
abilistic systems has been presented by defining them over an extension of the LTS model combining nonde- 
terminism and probability that we call NPLTS, in which every action-labeled transition goes from a source 
state to a probability distribution over target states rather than to a single target state [131 [TS]. Schedulers, 
that can be viewed as external entities that select the next action to perform, are used to resolve nonde- 
terminism [15] . By "playing" with schedulers, a number of possibilities for defining behavioral equivalences 
over NPLTS models emerge. We concentrated on three approaches that differ for the way probabilities of 
events are compared when nondeterministic choices are resolved via schedulers. 

1. Fully Matching Resolutions Two resolutions are compared with respect to the probability distribu- 

tions of all considered events. 

2. Partially Matching Resolutions The probabilities of the set of events of a resolution are required to 

be individually matched by the probabilities of the same events in possibly different resolutions. 

3. Min-Max Matching Resolutions Only the extremal probabilities of each event stemming from the 

different resolutions are compared. 

In pp, we have studied the relationships among the probabilistic variants of the main equivalences over 
nonderterministic systems that stem from the three approaches outlined above. 
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Figure 1: Reduced spectrum of strong behavioral equivalences for NPLTS models (deterministic schedulers) 



We proposed and analyzed three variants of trace, testing, failures and bisimulation equivalences for the 
NPLTS models. Their relationships are summarized in Fig. [I] In the spectrum, the absence of (chains of) 
arrows represents incomparability, double arrows connecting boxes indicate coincidence, and single arrows 
stand for the strictly-more-discriminating-than relation. Continuous hexagonal boxes contain well known 
equivalences that compare probability distributions of all equivalence-specific events. In contrast, continuous 
rounded boxes contain more recent equivalences assigning a weaker role to schedulers that compare separately 
the probabilities of individual equivalence-specific events. Continuous rectangular boxes instead contain old 
and new equivalences based on extremal probabilities. The only hybrid box is the one containing ~pTe,V3i as 
this equivalence does not follow any of the three definitional approaches. Dashed boxes contain equivalences 
that we have introduced in this paper to better assess the different impact of the approaches themselves. 

In this companion paper, following |19j . we enlarge the spectrum considered in [T] by additionally con- 
sidering variants of trace equivalences (completed-trace equivalences) , decorated-trace equivalences (failure- 
trace, readiness, and ready-trace equivalences), and of bisimulation equivalences (kernels of simulation, 
completed-simulation, failure-simulation, and ready-simulation preorders). Finally, we show how the spec- 
trum changes when using randomized schedulers in place of deterministic ones. 

We refer the reader to pQ for motivations and for the description the three approaches to equivalence 
definition based on schedulers. Only, to guarantee readability, we repeat here the background section of pQ 
that introduces the necessary terminology about NPLTS and schedulers. 

2. Nondeterministic and Probabilistic Processes 

Processes combining nondeterminism and probability are typically described by means of extensions of the 
LTS model, in which every action-labeled transition goes from a source state to a probability distribution 
over target states rather than to a single target state. They are essentially Markov decision processes [4] and 
are representative of a number of slightly different probabilistic computational models including internal 
nondeterminism such as, e.g., concurrent Markov chains |20j . alternating probabilistic models [71 |2~T1 HI], 
probabilistic automata in the sense of [15], and the denotational probabilistic models in [3] (see [T7J for an 
overview). We formalize them as a variant of simple probabilistic automata |15j . 

Definition 2.1. A nondeterministic and probabilistic labeled transition system, NPLTS for short, is a triple 
(S, A, — >) where: 

• S is an at most countable set of states. 
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Figure 2: Graphical representation of NPLTS models: two examples 

• A is a countable set of transition-labeling actions. 

• — > C S x A x Distr(S) is a transition relation, where Distr(S) is the set of discrete probability 
distributions over S. ■ 

A transition (s, a, 2?) is written s — —> V. We say that s' € S is not reachable from s via that a-transition 
if 'D(s') = 0, otherwise we say that it is reachable with probability p = T>(s'). The reachable states form the 
support of T>, i.e., supp{T>) = {s' € S | T>{s') > 0}. We write s — — > to indicate that s has an a-transition. 
The choice among all the transitions departing from s is external and nondeterministic, while the choice 
of the target state for a specific transition is internal and probabilistic. An NPLTS represents (i) a fully 
nondeterministic process when every transition leads to a distribution that concentrates all the probability 
mass into a single target state or (ii) a fully probabilistic process when every state has at most one outgoing 
transition. 

An NPLTS can be depicted as a directed graph-like structure in which vertices represent states and 
action-labeled edges represent action-labeled transitions. Given a transition s — > T>, the corresponding 
a-labeled edge goes from the vertex representing state s to a set of vertices linked by a dashed line, each of 
which represents a state s' £ supp(T>) and is labeled with T>{s') - label omitted iiV{s') — 1. Figure [2] shows 
two NPLTS models: the one on the left mixes internal nondeterminism and probability, while the one on 
the right does not. 

a 

In this setting, a computation is a sequence of state-to-state steps, each denoted by s — i— > s' and derived 
from a state-to-distribution transition s — > T>. 



Definition 2.2. Let C = (5, A, — >) be an NPLTS and s, s' € S. We say that: 

c = s si i y S 2 ■ ■ ■ S„_l -H-> s n 

is a computation of C of length n from s = so to s' — s n iff for all i — 1,... ,n there exists a transition 
Sj_i — ^ 2?j such that Sj € supp(T>i), with X'j(sj) being the execution probability of step Sj_j — )— > Sj condi- 
tioned on the selection of transition s,_i 2?j of C at state Sj_i. We say that c is maximal iff it is not 
a proper prefix of any other computation. We denote by first(c) and last(c) the initial state and the final 
state of c, respectively, and by Cfm(s) the set of finite-length computations from s. ■ 

A resolution of a state s of an NPLTS C is the result of a possible way of resolving nondeterminism 
starting from s. A resolution is a tree-like structure whose branching points represent probabilistic choices. 
This is obtained by unfolding from s the graph structure underlying C and by selecting at each state a 
single transition of C {deterministic scheduler) or a convex combination of equally labeled transitions of £ 
{randomized scheduler) among all the outgoing transitions of that state. Below, we introduce the notion of 
resolution arising from a deterministic scheduler as a fully probabilistic NPLTS (randomized schedulers are 
deferred to Sect.|4|. Notice that, when C is fully nondeterministic, resolutions coincide with computations. 

Definition 2.3. Let C = {S, A, — ►) be an NPLTS and s € S. We say that an NPLTS Z = {Z, A, — > z ) 

is a resolution of s obtained via a deterministic scheduler iff there exists a state correspondence function 
corrz ■ Z — > S such that s = corrz{z s ), for some z s € Z, and for all z € Z it holds that: 
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• If z V, then corr z (z) V with V(z') = V'(corr z (z')) for all z' £ Z. 

• If z —^z D\ and z ~^tz 2^2, then ai = a 2 and 2?i = 2?2- 

We say that Z is maximal iff it cannot be further extended in accordance with the graph structure of £ and 
the constraints above. We denote by Res(s) the set of resolutions of s obtained via a deterministic scheduler 
and by i?es max (s) the set of maximal resolutions of s obtained via a deterministic scheduler. ■ 

Since Z £ Res(s) is fully probabilistic, the probability prob{c) of executing c £ Ca n (z s ) can be defined as 
the product of the (no longer conditional) execution probabilities of the individual steps of c, with prob{c) 
being always equal to 1 if £ is fully nondeterministic. This notion is lifted to C C Cfi n (z s ) by letting 
prob{C) = X)cec P r °b( c ) whenever none of the computations in C is a proper prefix of one of the others. 

Definition 2.4. Let £ = (S,A, — >) be an NPLTS and s £ S. We say that an NPLTS Z = (Z,A, — >z) 
is a resolution of s obtained via a randomized scheduler iff there exists a state correspondence function 
corrz ■ Z — > S such that s = corr z(z s ), for some z s £ Z, and for all z £ Z it holds that: 

• If z-^-^zD, then there exist n £ N>o, {pi £ K]o,i] | 1 < * < n}, and {corTz(z) — % Z?j | 1 < % < n} 
such that Y^i=iPi = 1 an d 2?( z ') = T^i=\Pi ' ^ i(corrz(z')) for all z' G Z. 

• If z —^z D\ and z —^z T^2, then a\ — a 2 and 2?i = "D%. ■ 

We finally introduce a notion of fully synchronous parallel composition for NPLTS models, borrowed 
from that is instrumental to the definition of testing equivalences. 

Definition 2.5. Let Ci = (Si, A, — >i) be an NPLTS for i = 1, 2. The parallel composition of £i and £2 is 
the NPLTS £1 || £ 2 = (Six £2, 4 — >) where — > C (Si x S 2 ) x ^ x Distr{Si x S 2 ) is such that (s u s 2 ) -^-T> 
iff si -^x 2?i and s 2 -^2 ^2 with T>(s[,s' 2 ) = £>i(s'i) ■ £> 2 (s 2 ) for each (s^ s' 2 ) G Si X S 2 . ■ 



3. A Full Spectrum of Strong Behavioral Equivalences 

In this section, following [19] we enlarge the spectrum by additionally considering variants of trace 
equivalences (completed-trace equivalences), further decorated-trace equivalences (failure-trace, readiness, 
and ready-trace equivalences) , and variants of bisimulation equivalences (kernels of simulation, completed- 
simulation, failure-simulation, and ready-simulation preorders). Finally, we show how the spectrum changes 
when using randomized schedulers in place of deterministic ones. 

3.1. Completed- Trace Equivalences 

A variant of trace equivalence that additionally considers completed computations was introduced in the 
literature of fully nondeterministic models in order to equip trace equivalence with deadlock sensitivity. 
Given an NPLTS £ = (S, A, — s £ S, Z £ Res(s), and a £ A* , we recall that CCC(z s , a) denotes the set 
of completed a-compatible computations from z s . In other words, each of these computations c belongs to 
CC(z s ,a) and is such that corrz {last (c)) has no outgoing transitions in £. 

Definition 3.1. (Probabilistic completed-trace- distribution equivalence - ^pcTr,dis) 
si ~PCXr,dis s 2 iff for each Z\ £ Res(s\) there exist Z 2 , Z' 2 £ Res(s2) such that for all a £ A* : 

prob(CC(z Sl ,a)) = prob(CC(z S2 , a)) 
prob(CCC(z Sl ,a)) = prob(CCC(z' s ,a)) 
and symmetrically for each Z 2 £ i?es(s 2 ). ■ 

Definition 3.2. (Probabilistic completed-trace equivalence - ~pctt) 

si ^pcTr S2 iff for all a £ A* it holds that for each Z\ £ Res(s{) there exist Z%, Z' 2 £ Res(s2) such that: 

prob(CC(z Sl ,a)) = prob(CC(z S2 , a)) 
prob(CCC(z Sl ,a)) = prob(CCC(z' S2 ,a)) 
and symmetrically for each Z 2 £ Res(s2). ■ 
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Definition 3.3. (Probabilistic \AT\- completed-trace equivalence - ~PCTr,un) 
s\ ~pcxr,un s 2 iff for all a e A*: 

[J prob(CC(z Sl ,a)) = \J prob(CC(z S2 , a)) 

|~| prob(CC(z sl ,a)) = |~| prob(CC(z S2 , a)) 

Zi£Res a (si) Z 2 £Res a (s2) 

and: 

[J prob(CCC(z Sl ,a)) = \J prob(CCC(z S2 ,a)) 

Zi£Res a (s 1 ) Z 2 6-Res Q (s2) 

|~| prob(CCC(z Sl ,a)) = f| pro6(CCC(z S2 , q)) 

2iG-Res Q (s 1 ) 2 2 6-Res Q (s 2 ) ■ 

We now investigate the relationships of the three completed-trace equivalences among themselves and 
with the various equivalences defined so far. As in the fully nondeterministic spectrum |19| . completed- 
trace semantics is comprised between failure semantics and trace semantics. This holds in particular for 
the completed-trace equivalence based on fully matching resolutions, although completed-trace semantics 
coincides with trace semantics in the fully probabilistic spectrum [121 [8] . 

Theorem 3.4. It holds that: 

1. ^ PCTl%dis C ~pCTr C ^PCTr,un- 
2- ^PF,dis Q ~PCTr,dis Q ~PXr,dis- 
3. ^PF C ^PGTr Q ~PTr- 

4- ~PF,un Q ~PCTr,un Q ~PTr,un- 

Proof Let (S,A, — >) be an NPLTS and s 1 ,s 2 € S: 

1. Similar to the proof of Thm. 3.5 in pQ. 

2. Suppose that si ^pF.dis s 2 . Then we immediately derive that: 

• For each Z\ g Res(s%) there exists Z 2 € Res(s 2 ) such that for all a E A*: 

prob(CC(z Sl ,a)) — prob(J 7 CC(z Sl , (a,0))) = 

= prob[TCC[z S2 , (a, 0))) = prob(CC(z S2 , a)) 
prob(CCC(z Sl , a)) = prob(TCC(z Sl , (a, A))) = 

= prob(TCC(z S2 , (a, A))) = pro&(CCC(z S2 , a)) 

• Symmetrically for each Z 2 G Res(s 2 ). 
This means that si ~pcTr,dis 

The fact that si ^pcTr.dis s 2 implies si ^pTr.dis s 2 is a straightforward consequence of the definition 
of the two equivalences. 

3. Suppose that si ^pf s 2 . Then we immediately derive that for all a E A*: 

• For each Z\ g Res(s%) there exist Z 2 G Res(s 2 ) such that: 

prob(CC(z Sl , a)) = prob(J 7 CC(z Sl , (a, 0))) = 

= prob(FCC(z S2 , (a,0))) = prob(CC(z S21 a)) 

and G Res(s 2 ) such that: 

prob(CCC(z Sl , a)) = prob(TCC(z Sl , (a, A))) = 

= prob(J-CC(z' S2 , (a, A))) = pro&(CCC(,Zg 2 , a)) 

• Symmetrically for each 2^ € Res(s 2 ). 
This means that si ~pcTr S2- 

The fact that s\ ~pcrr s 2 implies s\ ~pTr s 2 is a straightforward consequence of the definition of the 
two equivalences. 
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Figure 3: Two NPLTS models distinguished by equivalences in fragment 1 and identified by those in fragment 2 
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Figure 4: Two NPLTS models distinguished by equivalences in fragment 3 and identified by those in fragment 2 
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This means that s\ ~pcTr,un s 2 - 

The fact that s\ ~pcTr,un «2 implies s\ ~pTr,un S2 is a straightforward consequence of the definition 
of the two equivalences. ■ 

All the inclusions in Thm. l3~4lare strict: 



• Figures [3] and [^respectively show that ~pcTr,dis is strictly finer than ^pcTr and ^pcTr is strictly finer 
than ~pcTr,un- 



Si S 2 




Figure 5: Two NPLTS models distinguished by ~pp,dis/~PF/~PF un an( l identified by ~pTr dis/~PTr/~PTr.un 
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Figure 6: Two NPLTS models distinguished by -~pTr,un if only maximal resolutions were considered 

• Figure [5] shows that ~pF,dis, ^pf, and ^pF,un are strictly finer than ^pcTr.dis, ~PCTr, and ~pcTr,un, 
respectively. Indeed, for each resolution of Si (resp. S2) there exists a resolution of s 2 (resp. Si) 
such that both resolutions have precisely the same trace distribution and the same completed-trace 
distribution, thus si and s 2 are identified by ^pciY.dis (and hence by ~pcTr and ~pcTr,un)- In 
contrast, the leftmost a-computation of si is compatible with the failure pair (a, {c}) while s 2 has no 
computation compatible with that failure pair, thus S\ and s 2 are distinguished by ^pF,un (and hence 
by ~pf and ~p F ,dis)- 

• Figure |6] shows that ~pcrr,dis, ^PCTr, and ~pcTr,un are strictly finer than ~pTr,dis, ~PTr, and — pTr,un, 
respectively. Indeed, for each resolution of Si (resp. s 2 ) there exists a resolution of s 2 (resp. s%) such 
that both resolutions have precisely the same trace distribution, thus S\ and s 2 are identified by ~pTr.dis 
(and hence by ~ptt and ~pTr,un)- In contrast, the rightmost a-computation of s± is completed while 
s 2 has no completed a-compatible computation, thus s\ and s 2 are distinguished by ~pcTr,un (and 
hence by ~ PC Tr and ~ PC Tr,dis)- 

Moreover: 



^pb and ^pB.un are incomparable with the three completed-trace equivalences. Indeed, in Fig. [7] it 
holds that s\ ^pb S2 (and hence s\ ^pB.un s 2 ) - as can be seen by taking the equivalence relation that 
pairs states having equally labeled transitions leading to the same distribution - and s\ 7^pcTr,un s 2 
(and hence si t^pcty s 2 and s± 7^pcTr,dis s 2 ) - due to the trace abc having maximum probability 0.68 
in the first process and 0.61 in the second process. In contrast, in Fig. [8] it holds that s% 7^pB,un s 2 
(and hence Si t^pb s 2 ) _ as the two states with outgoing 6-transitions reachable from si are not 
Uri-bisimilar to the only state with outgoing 6-transitions reachable from s 2 - and s\ ~pcTr,dis S2 (and 
hence si ~pctt s 2 and si ~pcTr,un s 2 ). 



J PTe,un is incomparable with the three completed-trace equivalences. Indeed, in Fig. H 



it holds 
it holds 



that si ^pTc,un S2 and si T^pcTr «2 (and hence si /pcTr,dis)- In contrast, in Fig. [10 
that si /pTc.un S2 and s\ ~pcTr,dis S2 (and hence s\ ^pcTr ^2)- Likewise, in Fig. [9] it holds that 
si ^PTo,un S2 - as there is no test that results in an interaction system having a maximal resolution 
with differently labeled successful computations of the same length and hence no possibility of summing 
up their success probabilities - and s\ 9^pcTr,un S2 ~ due to the completed trace a b whose maximum 
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Figure 7: Two NPLTS models distinguished by testing/failure/trace equivalences and identified by ~pB/~PB,un 




Figure 8: Two NPLTS models distinguished by ~pB,dis/~PB/~PB,un an d identified by testing/failure/trace equivalences 




Figure 9: Two NPLTS models distinguished by ~pF,un and identified by ~pTc,un 
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Figure 11: Two NPLTS models distinguished by ~pF/~PF,un and identified by ~pTe-tbt/~PTe-tbt,un 

probability is 0.24 in the first process and 0.21 in the second process. In contrast, in Fig. [3] it holds 
that si ?^pTc,un s 2 and Si ~pcTr,un s 2 . 

• ^PTe-tbt and ~pTe-tbt un are incomparable with the three completed-trace equivalences, because in 



Fig. 11 it holds that s 1 ~ PT c-tbt s 2 (and hence s 1 ~pTe-tbt,un s 2 ) and Si / PC Tr,un s 2 (and hence 



$i /pcTr s 2 and S\ T^pcTr.dis s 2 ), while in Fig. 12 it holds that Si T^pTc-tbt.un s 2 (and hence 



si 7^PTc-tbt s 2 ) and si — pTr.dis s 2 (and hence si ~pti- s 2 and si — pTr.un s 2 ). 

^pf and ^pF.un are incomparable with ~pcTr,disi because in Fig.[3]it holds that s\ ^pf s 2 (and hence 
Si ^pF.un s 2) and s x 7^pcTr,dis s 2 , while in Fig. [5] it holds that si 7^pF,un *2 (and hence s x /pp S2) 
and si — pcTr : dis «2- 

• ^PF.un is incomparable with ~pcTr: because in Fig. [4] it holds that si ^pF.un s 2 and si T^pcTr s 2 , 
while in Fig. [5] it holds that si 7^pF,un s 2 and si ^pcTr s 2 . 

• ^PCTr and ~pcTr,un are incomparable with ^pTr,dis, because in Fig. [3] it holds that s\ ~pcTr s 2 (and 
hence S\ ~pcTr,un s 2) and s x T^pTr.dis s 2 , while in Fig. [6] it holds that Si /pcTr,un s 2 (and hence 

Sl T^PCTr S 2 ) and Si — PTr,dis s 2 . 

• ^PCTr.un is incomparable with ^pTr, because in Fig. [4] it holds that si ^pcTr,un s 2 and si t^piy s 2 , 
while in Fig. [6] it holds that Si T^pcTr.un s 2 and Si ^px r s 2 . 

3.2. Failure- Trace, Readiness, and Ready-Trace Equivalences 

Failure semantics generalizes completed-trace equivalence towards arbitrary safety properties. An extension 
of failure semantics is failure-trace semantics. We call failure trace an element cj) £ [A x 2 A )* given by 
a sequence of n £ N pairs of the form (ai,Fi). We say that c £ Ca n (z s ) is compatible with iff c € 
CC{z s , a\ . . . a n ) and, denoting by Zi the state reached by c after the i-th step for all i = 1, . . . , n, corrz{zi) 
has no outgoing transitions in £ labeled with an action in Fi. We denote by FTCC(z s , <j)) the set of 
0-compatible computations from z s . 




processes test interaction systems 

Figure 12: Two NPLTS models distinguished by ~pTc-tbt/~PTc-tbt.un an d identified by ~pTr/~PTr,un 



Definition 3.5. (Probabilistic failure-trace- distribution equivalence - ~pFTr,dis) 

si ^PFTr.dis s 2 iff for each Z\ G Res(si) there exists Z 2 G Res(s2) such that for all G (A x 2 A )*: 

prob(FTCC(z Sl ,ip)) = prob(TTCC(z S2 ,ip)) 
and symmetrically for each Z 2 G Res(s 2 )- ■ 

Definition 3.6. (Probabilistic failure-trace equivalence - ^pftv) 

si ^pftt s 2 iff for all (f> £ (A x 2 A )* it holds that for each Z\ G Res(s\) there exists Z 2 € Res(s 2 ) such that: 

pmb(JTCC(z ai ,(p)) = prob(FTCC(z S2 ,ip)) 
and symmetrically for each Z 2 G Res(s 2 ). ■ 

Definition 3.7. (Probabilistic Un -failure-trace equivalence - ~pFTr,un) 
si ~pf un S2 iff for all 4> G (A x 2 A )*: 

U prob(FTCC(z Sl ,<p)) = U prob(FTCC{z S2 ,y)) 

Z 1 eRes a (s 1 ) Z 2 eRes a (s 2 ) 

|-| prob(FTCC(z Sl ,<p)) = |-| pr &(^TCC(z S2 ,^)) 

2l£fles Q (si) Z 2 efles Q (s 2 ) ■ 

A different generalization towards liveness properties is readiness semantics, which considers the set of 
actions that can be accepted after performing a trace. We call ready pair an element g G A* x 2 A formed 
by a trace a and a decoration i? called ready set. We say that c is compatible with g iff c G CC(z s ,a) and 
the set of actions labeling the transitions in L departing from corr z(last(c)) is precisely R. We denote by 
lZCC(z s , q) the set of p-compatible computations from z s . 

Moreover, we call ready trace an element p£(4x 2 A )* given by a sequence of n G N pairs of the form 
(dj, Ri). We say that c G Ca n (z s ) is compatible with p iff c G CC(z s , cii . . . a n ) and, denoting by Zi the state 
reached by c after the i-th step for alH = 1, . . . , n, the set of actions labeling the transitions in C departing 
from corrz(zi) is precisely Ri. We denote by lZTCC(z s , p) the set of p-compatible computations from z s . 

Definition 3.8. (Probabilistic readiness- distribution equivalence - ^pr^dis) 

si ^pR,dis s 2 iff for each Z\ G Res(si) there exists Z 2 G Res(s 2 ) such that for all g G A* x 2 A : 

prob(KCC(z Sl ,g)) = prob(KCC(z S2 , g)) 
and symmetrically for each Z 2 G Res(s 2 ). ■ 

Definition 3.9. (Probabilistic readiness equivalence - ~pr) 

s i ~pr s 2 iff for all g G A* x 2 A it holds that for each Z x G i?es(si) there exists Z 2 G Res(s 2 ) such that: 

prob(R£C(z Sl , q)) = prob(KCC(z S2 , g)) 
and symmetrically for each i? 2 G Res(s 2 ). ■ 

Definition 3.10. (Probabilistic UF\-readiness equivalence - ~pR.un) 
Si ~PR,un s 2 iff for all g = (a, R) G A* x 2 A : 

U prob{1ZCC(z Sl , q)) = U pr &(^CC(z S2 ,e)) 

2ae.Res a (si) Z 2 6-Res Q (s2) 

|-| P rob(TZCC(z Sl ,g)) = fl pr &(^CC(z S2 , g)) 

^iG-Res a (si) ^2G-Res a (s2) B 
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Definition 3.11. (Probabilistic ready-trace-distribution equivalence - ~pRTr.dis) 

si ^pRTr,dis «2 iff for each Z\ € Res(s\) there exists Z2 € Resis-i) such that for all p £ (Ax 2 A )*: 

prob(lZTCC(z Sl , g)) = prob(1ZTCC(z S2 , g)) 
and symmetrically for each Z 2 G Res(s2)- ■ 

Definition 3.12. (Probabilistic ready-trace equivalence - ^prti) 

si ^pRTr S2 iff for all p £ (A x 2 A )* it holds that for each Z\ £ Res(s\) there exists Z2 <E Res(s2) such that: 

prob(lZTCC(z Sl , g)) = prob(7ZTCC(z S2 , g)) 
and symmetrically for each Z2 € Res(s2)- ■ 

Definition 3.13. (Probabilistic Ur\-ready-trace equivalence - ^pRTr.un) 
S\ ~pRTr,un s 2 iff for all p £ (Ax 2 A )*: 

U prob(KTCC(z Sl ,g)) = \J prob(KTCC(z S2 , g)) 

n prob(TZTCC(z Sl ,g)) = fl prob(RTCC(z S2 , g)) 

Z 1 eRes a (s 1 ) Z 2 eRes a (s 2 ) ■ 

We now investigate the relationships of the nine additional decorated-trace equivalences among them- 
selves and with the various equivalences defined so far. As in the fully probabilistic spectrum [HHE], fo r the 
decorated-trace equivalences based on fully matching resolutions it holds that readiness semantics coincides 
with failure semantics, and this extends to ready-trace semantics and failure-trace semantics. In contrast, 
for the other decorated-trace equivalences based on partially matching resolutions or extremal probabili- 
ties, unlike the fully nondeterministic spectrum [19] it turns out that ready-trace semantics and readiness 
semantic are incomparable with most of the other semantics. 

Theorem 3.14. It holds that: 

1. ~7r,dis C ~ w C ~ W)Un for all 7T G {PRTr, PFTr, PR}. 

2- ^PTc-tbt,dis C ^PRTr.dis- 

3- ^pRTr.dis = ^PFTr,dis over finitely-branching NPLTS models. 

4- ~pR,dis = ^"PF.dis over finitely-branching NPLTS models. 

5. ~PFTr,dis Q ^PF,dis- 

6. ~PFTr C ^PF- 

7. ~PFTr.un C ~PF,un- 



Proof Let (S,A, — >) be an NPLTS and Si,s 2 E S: 

1. Similar to the proof of Thm. 3.5 in pQ. 

2. We show that S\ ~pTe-tbt,dis S2 implies s\ ~pRTr,dis S2 by building a test that permits to reason 
about all ready traces at once for each resolution of si and s 2 - We start by deriving a new NPLTS 
(SV, A r , — > r ) that is isomorphic to the given one up to transition labels and terminal states. A transi- 
tion s — % T> becomes s r V r where R C A is the set of actions labeling the outgoing transitions of s 
and 2? r (sr) = 2?(s) for all s £ S. If s is a terminal state, i.e., it has no outgoing transitions, then we 

add a transition s r S Sr where 5 Sr (s r ) = 1 and S Sr (s[.) = for all s' € S\ {s}. Transition relabeling 
preserves ~pTe-tbt,dis, i-e., Si ~PTc-tbt,dis s 2 implies s x , r ~ PT c-tbt,dis s 2 , r , because ~p T e-tbt,dis is able to 
distinguish a state that has a single a-compatible computation reaching a state with a nondetermin- 
istic branching formed by a 6-transition and a c-transition from a state that has two a-compatible 
computations such that one of them reaches a state with only one outgoing transition labeled with b 
and the other one reaches a state with only one outgoing transition labeled with c (e.g., use a test that 
has a single a-compatible computation whose last step leads to a distribution whose support contains 
only a state with only one outgoing transition labeled with b that reaches success and a state with 
only one outgoing transition labeled with c that reaches success). 
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For each a r G (A r )* and R C A, we build an NPT 7^ r ,fl = (O a ^ R , A r , — ^ Qr ^) having a single 
a r -compatible computation that goes from the initial state o ai ^ R to a state having a single transition 
to w labeled with (i) o < if R = or (ii) _ < R if R ^ 0. Since we compare individual states (like s\ 
and s 2 ) rather than state distributions, the distinguishing power of ^pTc-tbt,dis does not change if we 
additionally consider tests starting with a single r-transition that can initially evolve autonomously in 
any interaction system. We thus build a further NPT T = (O, A x , — s-f) that has an initial r-transition 
and then behaves as one of the tests Ta r , R , i.e., its initial r-transition goes from the initial state o to 
a state distribution whose support is the set {o a ^ R \ a x G (A r )* ARC A}, with the probability p ar ,R 
associated with o a ^ R being taken from the distribution whose values are of the form 1/2% i G N >0 - 
Note that T is not finite state, but this affects only the initial step, whose only purpose is to internally 
select a specific ready trace. 

After this step, T interacts with the process under test. Let p G (A ~x 2 A )* be a ready trace of the 
form (oi, J?i) . . . (a n ,Rn), where n G N. Given s £ S, consider the trace a p .r G {A T )* of length n + 1 in 
which the first element is oi < R, with R C A being the set of actions labeling the outgoing transitions 
of s, the subsequent elements are of the form cij < Ri-i for i = 2, . . . , n, and the last element is (i) o 
if R n = or (ii) _< R n if R n ^ 0. Then for all Z G Res(s) it holds that: 

prob(KTCC(z s ,p)) = 
if there is no cti . . . a„-compatiblc computation from z s , otherwise: 

prob(KTCC(z s ,p)) = prob(SCC(z Srt0 ,a p . r ))/p a , pitRn 
where a' r is a p r without its last element. 

Suppose that s\ ^pTc-tbt.dis s 2l which implies that s\ and s 2 have the same set R of actions labeling 
their outgoing transitions and ^pib-tbt.dis S2,r- Then: 

• For each Z\ G Res(si) there exists Z 2 G Res(s 2 ) such that for all ready traces 
p = {ai,Ri) . . . (a n ,R n ) G (A x 2 A )* cither: 

prob(TZTCC(z Sl ,p)) = = prob(TZTCC(z S2 ,p)) 

or: 

prob(KTCC(z Sl ,p)) = prob(SCC(z Sltt0 ,a PtI ))/p a ^^ Rn = 

= prob(SCC(z S2 ti0 ,a PtI ))/p a > p t , Rn = prob(TZTCC(z S2 , p)) 

• Symmetrically for each Z 2 G Res(s 2 ). 

This means that si ~pRTr,dis s 2 . 
3. We preliminarily observe that for all s G S, Z G Res(s), n G N, a = cii . . . a n G A* , and F\,...,F n , 
Ri, . . . , R n G 2 A it holds that: 

prob(TTCC(z s , (ai,Fi) . . . (a n ,F n ))) = 

= Er[,...,r^ s.t. HjnJi=e for aUi=i,..., n P™b (RTCC (z^, (a u R[) . . . {a n , R' n ))) 
P rob(TZTCC(z s , (oi.iii) . .. (a n ,R n ))) = prob{TTCC{z s , (a^R^ . . . (a n ,R n ))) 

- Y? r ^ R £11712k£r% aiii=i,...,n Prob(KTCC(z s , {a u R[) . . . (a n , R' n ))) 
where Ri = A \ Ri for alH = 1, ... , n. 

Suppose that si ^pRTr,dis s 2 . Then we immediately derive that: 

• For each Z\ G Res(si) there exists Z 2 G Res(s 2 ) such that for all (ai,Fi) . . . (a n , F n ) G (A x 2 A )*: 

prob(FTCC(z Sl , (oi.Fi) . . . K,F„))) = 

= ^,...,^€2^.1.^^=0 for alH=l,..^^ 

= „^ 6 2^.t.fl;nF,=8 for & \H=i,..., n P roh {' R <TCC{z S2 ,{a 1 ,R! l ) ...{a n , R' n ))) 

= prob(TT CC{z S2 , (oi, Fi) . . . (a„, F„))) 

• Symmetrically for each Z 2 G Res(s 2 ). 
This means that si ^PFTr.dis s 2- 

Suppose now that si ^pFTr,dis s 2 . For each ready trace pe (Ax 2 A )* including at least one infinite 
ready set, it trivially holds that for all Z\ G Res(si) and Z 2 G Res(s 2 ): 
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prob(KTCC(z ai ,p)) = = prob{TZTCC(z S2 , p)) 
whenever the considered NPLTS is finitely branching. Thus, in order to prove that s\ ~pRTr,dis s 2 , we 
can restrict ourselves to ready traces including only finite ready sets. Given an arbitrary Z\ £ Res(s±) 
that is matched by some Z 2 £ Res(s 2 ) according to ^pFTr.dis, we show that the matching holds also 
under ~pRTr,dis by proceeding by induction on the sum k £ N of the cardinalities of the ready sets 
occurring in ready traces including only finite ready sets: 

• Let k = 0, i.e., consider ready traces whose ready sets are all empty. Then for all a = a\ . . . a n £ 

A*: 

prob(KTCC{z Sl , (01, 0) . . . (on, 0))) = P rob(TTCC(z Sl ,{a u A)... (a„, A))) 

= prob(FTCC(z S2 ,{a u A) . . . (a n ,A))) 
= prob(KTCC(z S2 , (ai, 0) . . . (a„,0))) 

• Let k £ N>o and suppose that the result holds for all ready traces for which the sum of the 
cardinalities of the ready sets is less than k. Then for all (oi, R\) . . . (a n , R n ) £ (A x 2 A )* such 
that Ei<i<„ \Ri\ = k: ' 

P rob(TZTCC(z Sl ,(ai, R{) . . . (a„, R n ))) = prob(FTCC(z Sl , (oi, Ri) ...{a n ,R n ))) 

- T j r^...m^ITZ7.r{gr^ aiu=i,...,n prob(TZTCC(z^ , (oi, iZi)^ . (a n ,R' n ))) 

= prob(J 7 TCC(z S2 , (ai,Ri)... (a n ,R n ))) 

- E5^ie2^^cflTfor aUi=i,..., n prob{TZTCC(z S2 , (oi, R[) . . . (a n ,R' n j)) 

= prob{KTCC{z S2 ,(a 1 ,R 1 ) . . . (a n ,R n ))) 

A similar result holds also starting from an arbitrary Z 2 G Res (52) that is matched by some 
Zi £ Res(si) according to ~pFTr,dis- Therefore, we can conclude that S\ ^pRTr,dis s 2- 
4. We preliminarily observe that for all s e S, Z e Res(s), a G A* , and F, R e 2 A it holds that: 
prob{TCC(z s ,{a,F))) = Efi- e 2^.t. M P™K^C(z s ,(a,i?'))) 
probCRCC (z„ (a, R))) = prob(FCC(z s , (a, A \ R))) - J2wcR prob(UCC(z s , (a, R'))) 
Suppose that si ~pR.dis s%. Then we immediately derive that: 

• For each Z\ e Res(si) there exists Z 2 € Res(s 2 ) such that for all (a,F) e A* x 2 A : 

prob{FCC{z Sl ,{a,F))) = E R 'e2^ s .t. wnF =0 prob(UCC(z Sl , (a, R'))) 
= T,we2A s .t. R>nF=<i P rob (KCC(z S2 , (a,R'))) 
= prob{TCC(z S2 ,(a,F))) 

• Symmetrically for each Z 2 £ Res(s 2 ). 
This means that si ^pF,dis s 2 . 

Suppose now that Si ^pF.dis s 2- F° r each ready pair (a,R) e A* x 2 A such that R is infinite, it 
trivially holds that for all Z\ e Res{s\) and Z 2 £ Res(s 2 ): 

pwb(RjCC(z Sl ,(a,R))) = = prob(TZCC(z S2 , (a, R))) 
whenever the considered NPLTS is finitely branching. Thus, in order to prove that s\ ~pR,dis s 2, we 
can restrict ourselves to ready pairs whose ready set is finite. Given an arbitrary Z\ £ Res(si) that 
is matched by some Z 2 £ Res(s 2 ) according to ^pF,dis, we show that the matching holds also under 
^PR,dis by proceeding by induction on the cardinality k £ N of the ready set of ready pairs whose 
ready set is finite: 

• Let k — 0, i.e., consider ready pairs whose ready set is empty. Then for all a £ A*: 

prob{nCC(z Sl ,(a,$))) = prob(FCC{z Sl ,{a,A))) = 

= prob(TCC(z S2 ,(a,A))) = prob(KCC(z S2 , (a,0))) 

• Let k £ N >0 and suppose that the result holds for all ready pairs whose ready set has cardinality 
less than k. Then for all (a, R) £ A* x 2 A such that \R\ = k: 

prob(TZCC(z Sl ,{a,R))) = prob(TCC{z Sl ,(a,A\R)))- Er'cR prob(TZCC{z Sl , (a, R'))) 
= prob(TCC(z S2 , (a,A\ R))) - ^ R , cR prob(RCC(z S2 ,(a,R'))) 
= prob(RCC(z S2 ,(a,R))) 
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A similar result holds also starting from an arbitrary Z2 € Res(s2) that is matched by some 
Z\ £ Res(sx) according to ^pF,dis- Therefore, we can conclude that s± ^pR,dis S2- 

5. Suppose that s\ ~pFTr,dis S2- Then we immediately derive that: 

• For each Z\ £ Res(si) there exists Z 2 £ Res(s2) such that for all (a\ . . . a n , F) £ A* x 2 A : 

prob{J r CC{z Sl ,(ai . ..a„,F))) = prob(FTCC(z Sl , (oi,0) . . . (a n _i, 0)(a„, F))) 

= prob(FTCC(z S2 , ( ai , 0) . . . (a n _i, 0)(a„, F))) 

= pro&(J r CC(z S2 ,(a 1 ...a„,F))) 

• Symmetrically for each Z2 £ Res(s 2 ). 

This means that s% ^pF.dis S2- 

6. Suppose that S\ ~pftt *2- Then we immediately derive that for all (ai . . . a n , F) £ A* x 2 A : 

• For each Z\ £ Res(si) there exists Z2 £ Res(s2) such that: 

prob(TCC{z Sl , (ai . . .a n ,F ))) = prob{FTCC(z Sl ,(ai,$) . . . (a„_i, 0)(a„, F))) 

= prob{FTCC{z S2 , (01, 0) . . . (on-i, 0)K, F))) 

= prob(J r CC(z S2 , (ai ... On, F))) 

• Symmetrically for each 2^2 S Res(s2)- 

This means that Si ^pf S2- 

7. Suppose that si ^pFTr.un S2- Then we immediately derive that for all ip — (a, F) £ A* x 2 A : 



u 
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prob(FCC(z Sl , 
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</>)) = 


U prob{FTCC{z Sl ,{ai,$) 


■ ■ ■ (On- 
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22efles Q (s 2 ) 

□ prob(TCC(z S2 ,ip)) 

Z2&Res a (s 2 ) 


■ ■ ■ (a„_ 
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that s 


n pro6(JTCC(«. al (ai,0) 

Z 2 e-Res Q (s 2 ) 

|~| prob(FCC(z S2 ,ip)) 

Z2&Res a (s2) 
1 ~PF,un S2- 


■ ■ ■ (a n _ 


-i,0)(a„,F))) 



All the inclusions in Thm. l3~14l are strict: 

• Figures [3] and |1] respectively show that for all tt £ {PRTr, PFTr, PR} it holds that ~7r,dis is strictly 
finer than ^ n and is strictly finer than ^.un- 



• Figure 10 shows that ~pTe-tbt,dis is strictly finer than ^pRTr,dis- It holds that s% 7^pTc-tbt,dis S2 because 
~PTe-tbt,dis coincides with ~pTc,va an d we have already exhibited a test distinguishing the two processes 
with respect to ~pTe,va- In contrast, s± ^pRTr,dis S2 because for each resolution of si (resp. S2) there 
exists a resolution of S2 (resp. Si) having precisely the same ready-trace distribution. 



Figure 13 shows that ~pRTr,dis and ^PFTr.dis are strictly finer than ~pR j( iis and ~PF,disi respectively. 
It holds that si 7^pRTr,dis s 2 (and hence si /pFTr,dis S2) because the ready-trace distribution of the 
leftmost maximal resolution of s\ in which the choice between b and d is solved in favor of b is not 
matched by the ready-trace distribution of any of the resolutions of s 2 - In contrast, s% ^pR.dis S2 
(and hence si ^pF,dis $2) because for each resolution of si (resp. S2) there exists a resolution of S2 
(resp. Si) having precisely the same readiness distribution. In particular, the readiness distribution of 
the leftmost maximal resolution of s\ considered before is matched by the readiness distribution of the 
leftmost maximal resolution of S2 in which the choice between b and d is solved as before, because when 
dealing with ready pairs instead of ready traces the probabilities of performing the two ^-transitions 
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Figure 14: Two NPLTS models distinguished by ~ppTr/~PFTr,un and identified by ~pF/~PF,un 



in those resolutions can be summed up in the case of traces of length greater than 1. Likewise, the 
readiness distribution of the leftmost maximal resolution of s% in which the choice between b and d is 
solved in favor of d is matched by the readiness distribution of the central maximal resolution of s 2 i n 
which the choice between b and d is solved in the same way. 



Figure 14 shows that ^pftt and ~pFTr,un are strictly finer than ~pp and ^pF,un, respectively. It 
holds that si 7^pFTr,un «2 (and hence si t^pftt S2) because si has a computation compatible with the 
failure trace (a, A \ {&, c}) (c, A \ {e}) (e, A) while S2 has no computation compatible with that failure 
trace. In contrast, s\ ~pf S2 (and hence s\ ~pF,un ^2) because, given an arbitrary failure pair, for 
each resolution of Si (resp. S2) there exists a resolution of S2 (resp. Si) having the same probability of 
performing a computation compatible with that failure pair. 



Moreover: 



• ^pb and ^pB.un are incomparable with the nine decorated-trace equivalences introduced in this 
section. Indeed, in Fig. [7] it holds that si ~pb S2 (and hence s\ ~pB.un S2) _ as can be seen by 
taking the equivalence relation that pairs states having equally labeled transitions leading to the 
same distribution - Si T^pRTr.un *2 (and hence Si T^pRTr S2 and Si /pRTr,dis S2) - due to the ready 
trace (a, {b}) (b, {c}) (c, 0) having maximum probability 0.68 in the first process and 0.61 in the second 
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process - s% 7^pR,un s 2 (and hence si t^pr S2 and si 7^pR,dis S2) _ due to the ready pair (abc, 0) having 
maximum probability 0.68 in the first process and 0.61 in the second process - and s\ T^pFTr.un S2 
(and hence s\ t^pftt «2 and si ?^pFTr,dis S2) - due to the failure trace (a, A \ {b}) (b,A \ {c}) (c, A) 
having maximum probability 0.68 in the first process and 0.61 in the second process. In contrast, in 
Fig. 8] it holds that si 7^pB,un S2 (and hence si t^pb S2) ~~ as the two states with outgoing 6-transitions 
ihable from si are not Ufl-bisimilar to the only state with outgoing 6-transitions reachable from s 2 - 



reac 



and s\ ^pTc-tbt,dis S2 (and hence Si and S2 are also identified by the nine decorated-trace equivalences). 

~PTc.un is incomparable with the nine decorated-trace equivalences introduced in this section. Indeed, 
in Fig. [4] it, holds that Si ^pTc.un s 2 , s i T^PRTr s 2 (and hence Si /pRTr.dis), sj t^pr s 2 (and hence 



si T^pR.dis), and si /pFTr s 2 (and hence s\ T^pFTr.dis)- In contrast, in Fig. 10 it holds that si 7^pTc,un S2 
and si — pRTr.dis s 2 (and hence si ~p R ,di S s 2 , si ~ PFTr.dis s 2 , si — prty s 2 , si ~ PR s 2 , and si — pFTr s 2 ). 
Likewise, in Fig.[9]it holds that si ^pTc.un S2 ~~ as there is no test that results in an interaction system 
having a maximal resolution with differently labeled successful computations of the same length and 
hence no possibility of summing up their success probabilities - Si 7^pRTr,un S2 - due to the ready trace 
(a, {&}) (6,0) whose maximum probability is 0.24 in the first process and 0.21 in the second process - 
si ?^PR,un S2 - due to the ready pair (a 6,0) whose maximum probability is 0.24 in the first process 
and 0.21 in the second process - and s\ 7^pFTr,un s 2 - due to the failure trace (a, A \ {b}) (b, A) whose 
maximum probability is 0.24 in the first process and 0.21 in the second process. In contrast, in Fig. [3] 
it holds that si ?^PTc,un s 2 , Si ~pRTr,un s 2 , s i ~PR,un s 2 , and Si ~p F Tr,un s 2 . 

~PRTr, ~pr, ~PR r Tr,un, and ~pr un are incomparable with ~pcTr,dis, ^PTr,dis, ~pftti ~pf, ~PTe-tbt 5 



~PCTr, ~PTr, ~PFTr,un, ~PF,un, ~PTe-tbt,un, ^PCTr.un, and ~PTr,un- Indeed, in Fig.[15]it holds that 
si ~PRTr s 2 (and hence si ~ P RTr,un s 2 ), si ~pr s 2 (and hence si ~p R , U n s 2 ), and s : ^p T r,un s 2 
(and hence si 7^pcTr,un s 2 , si ?^PTo-tbt,un s 2 , si 7^pF, U n s 2 , s\ T^pFTr.un s 2 , si t^ph- s 2 , s\ t^pctt s 2 , 
s\ T^PTo-tbt s 2 , si t^pf s 2 , si T^pFTr s 2 , Si 7^PTr,di s s 2 , and si 7^p C Tr,dis s 2 ) - due to the trace a b having 
maximum probability 1 in the first process and 0.5 in the second process. In contrast, in Fig.[l6]it holds 
that si 7^ P RTr,un s 2 (and hence s\ /priv s 2 ), si ^ P R, U n s 2 (and hence si / PR s 2 ), Si ~pcTr,dis s 2 
(and hence a\ ~pTr,dis s 2 ), and s\ ~pftt s 2 (and hence s\ — pf s 2 , si ~ pTc-tbt s 2 , a\ — pctt s 2 , 

Si ^PTr S 2 , Si ~PFTr,un S 2 , Si ~PF,un S 2 , Si ~PTe-tbt,Un S 2 , Si ~PCEr,Un S 2 , and Si ^PTr.Lin S 2 ). 



~pki> and ^pRTr.un are incomparable with ~pr and ^pR.un- Indeed, in Fig. 17 it holds that 
si ^pRTr S2 (and hence si ~pRTr,un s 2 ) and s% T^pR^un s 2 (and hence si t^pr s~2) - due to the 
ready pair (a 6/, 0) having maximum probability 1 in the first process and 0.5 in the second process. 



In contrast, in Fig. 14 it holds that si 7^p R Tr,un s 2 (and hence si /prtv s 2 ) - due to the ready trace 
(a, {b, c}) (c, {e}) (e, 0) having maximum probability 1 in the first process and in the second process 
- and Si s 2 (and hence Si ~p R ,un s 2 ). 

~PFi> and ^pFTr.un are incomparable with ~pcTr,dis and ^pTr,dis, because in Fig. [3] it holds that 
si — PFTr s 2 (and hence si ~pFTr,un s 2 ) and si /pTr.dis s 2 (and hence s\ 7^pcTr,dis s 2 ), while in Fig. [5] 
it holds that si 7^pFTr,un s 2 (and hence si T^pFTr s 2 ) and si ~pcTr,dis s 2 (and hence si ~pTr,dis s 2 ). 

~PFTr.un is incomparable with ~pcTr and ~ptd because in Fig. [4] it holds that sj ~pFTr,un s 2 and 
si T^PTr S2 (and hence si /pcTr s 2 ), while in Fig. [5] it holds that s\ 9^ P FTr,un s 2 and s\ ~pcTr S2 (and 
hence si ^pTr s 2 ). 

J PFTr.un is incomparable with ~pf and ^PTc-tbt too. Indeed, in Fig. [4] it holds that si ^pFTr,un S2 



and Si /pTc-tbt S2 (and hence s x /pp s 2 ). In contrast, in Fig. 14 it holds that si 7^pFTr,un S2 and 



si ^pf S2- Likewise, in Fig. 11 it holds that si 7^p F Tr,un S2 and si ~pTe-tbt S2. 



3.3. Simulation, Completed- Simulation, Failure-Simulation, and Ready -Simulation Equivalences 

The variant of bisimulation equivalence in which only one direction is considered is called simulation preorder, 
which is a refinement of trace inclusion. Simulation equivalence is defined as the kernel of simulation preorder. 
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In the probabilistic setting, simulation equivalence was defined by means of weight functions ilOj . Here we 
shall follow an alternative characterization introduced in [5], which relies on preorders as well as closed 
sets. Given an NPLTS (S, A, — !•), a relation S over S, and S' C S, we say that S' is an S-closed set iff 
S(S') = W G S I ^s' E S' . (s', s") £ S} is contained in 5'. Notice that, if S is an equivalence relation, then 
an 5-closed set is a group of equivalence classes. 

Definition 3.15. (Probabilistic set- distribution similarity - ~ps,dis ~~ [16] ) 

s i ^ps.dis s 2 hf Si Cps,dis s 2 & n d S2 Eps,dis Sx, where Eps,dis is the largest probabilistic set-distribution 
simulation. A preorder S over S is a probabilistic set- distribution simulation iff, whenever (sx, S2) € 5, then 
for each si — % 2?x there exists S2 — ^->- ©2 such that for all S-closed S' C 5 1 it holds that T>\(S') < T>2(S'). ■ 

Definition 3.16. (Probabilistic similarity - ~ps - [15] ) 

Sx ~ps S2 iff si C PS S2 and S2 Cps si, where C P g is the largest probabilistic simulation. A preorder S 
over S is a probabilistic simulation iff, whenever (sx, S2) G 5, then for all S-closed S' C 5 it holds that for 
each sx — * 2?i there exists S2 —> T>2 such that T>i(S') < T>2(S'). ■ 

Definition 3.17. (Probabilistic U-similarity - ^ps,u) 

sx ^ps.u S2 iff sx Cps.u S2 and S2 Eps,u sx, where Eps.u is the largest probabilistic U-shnulation. A 
preorder S over S is a probabilistic U- simulation iff, whenever (sx, S2) G 5, then for all 5-closed S" C S* and 
a £ A it holds that sx — — > implies S2 — — > and: 

U ^i(s') < U W) 

Sl — ^-V X>i S2 " > X>2 ' 

Similar to trace semantics, a number of variants of simulation semantics can be defined in which the sets 
of actions that can be refused or accepted by states are also considered. Given s E S, in the following we let 
init(s) = {a E A \ s — >}. Observing that init(s\) C init(s2) whenever s\ and S2 are related by a simulation 
semantics, the additional constraints are the following: 

• init(si) = => init(s2) = 0, for completed simulation (^pcs,dis, ^pcs> ^pcs.u)- 

• init(si) n F = =>■ init(s2) = for all i* 1 G 2 A , for failure simulation (~pFS,dis, ~pfs, ^pfs.u)- 

• init(si) = init(s 2 ), for ready simulation (~pRs,di S) ~prs, ~prS,u). 

Of the variants mentioned above, only ~pFS,dis has appeared in the literature of nondeterministic and 
probabilistic processes [3J [5] . 

We now investigate the relationships of the twelve simulation-based equivalences among themselves 
and with the various equivalences defined so far. First of all, it turns out that every simulation-based 
equivalence relying on partially matching transitions coincides with the corresponding simulation-based 
equivalence relying on extremal probabilities. Moreover, ready-simulation semantics coincides with failure- 
simulation semantics, but the various simulation-based semantics do not collapse to bisimulation semantics 
as in the case of fully probabilistic processes [TU]. Each of the simulation-based equivalences relying on 
fully matching transitions is comprised between bisimilarity and the corresponding trace equivalence, as in 
the fully nondeterministic spectrum 19 1. Iix contrast, the simulation-based equivalences relying on partially 
matching transitions or extremal probabilities are incomparable with most of the other equivalences. 

Theorem 3.18. It holds that: 

1. ~7r,dis C ~ w = ~ W)U for all 7T € {PS, PCS, PFS, PRS} over image-finite NPLTS models. 

2. ~pb,<t' C ~prs, ct = ~pfs,<t C ~ PCSiCT C -ps.ct for all a E {dis, e, □} and a' E {dis, e, Un} related to a. 

3- ^PS.dis Q ^PTr,dis- 
4. ^PCS.dis C ^PCTr.dis- 
5- ^PRS,dis Q ~PTc-tbt,dis- 
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Proof Let (S,A, — >) be an NPLTS and s 1: s 2 G S: 



1. The proof of the fact that '■^dis Q Q ~7r,u f° r all t 1 " G {PS, PCS, PFS, PRS} is similar to the proof 
of Thm. 6.5(1) in pQ. Moreover, it holds that C ~„. (and hence ~ w = ^tt,u) when the NPLTS 
is image finite. In fact, supposing that s\ ~,r,u s 2 , given a ~„- iLJ -closed set S 1 C S image finiteness 
guarantees that the following two sets: 

U {W)} and (J {W)} 

are finite. In turn, the finiteness of those two sets ensures that their suprema respectively belong to 
the two sets themselves. As a consequence, starting from: 

U W) < U W) 

Sl Pi S 2 E>2 

when both s x and s 2 have at least one outgoing a-transition, it holds that for each S\ — T>\ there exists 
s 2 V 2 such that V X {S') < V 2 (S') because we can take V 2 such that V' 2 {S') = |J S2 _^ v V 2 {S'). 
This means that s\ ^ n s 2 . 

2. The fact that ~pb, ct ' Q ^prs.ct Q ^pfs,ct Q ~pcs,<t Q ~ps,er for all a G {dis, e, U} and a' G {dis, e, Un} 
related to a is a straightforward consequence of the definition of the various equivalences. Moreover, it 
holds that ^pfs.o- ^^prs,<t (and hence ~prs. a =~pfs,ct)- In fact, supposing that S\ and s 2 are related 
by a simulation semantics so that init(s\) C init(s 2 ), if init(si) ^ init{s 2 ) because of some a G A 
such that a £ init(s\) and a G init(s 2 ) - which means that s± 7^prs,<t s 2 - then init{s\) fl {a} = but 
init{s 2 ) n {a} ^ - which means that si t^pfs.o- S2- 

3. We show that si Cps.dis «2 =>■ si CpTr,dis s 2 from which the result will follow, where s\ EpTr.dis s 2 
means that for each Z x G Res(si) there exists Z 2 G Res(s 2 ) such that for all a G A* it holds that 
pro6(CC(^ Sl ,a)) = prob(CC(z S2 ,a)). 

Suppose that s\ Cps.dis s 2 . This means that (si, s 2 ) G 5 for some probabilistic set-distribution simu- 
lation S over S. In turn, this induces projections of 5 that are fpr-simulations over pairs of matching 
resolutions and, since resolutions are fully probabilistic, we derive from [10] that such projections are 
actually fpr-bisimulations 6J. As a consequence, whenever (r 1; r 2 ) G S, then for each Z\ G Res(r{) 
there exists Z 2 G Res{r 2 ) such that the preorder <S lj2 over Z = Z\ U Z 2 corresponding to S projected 
onto Z x Z is an fpr-bisimulation, i.e., it is an equivalence relation and, whenever (z a ' ,z a i) G 5i )2 , 

then for each z s / —t 'Di there exists z s < -^V 2 such that for all equivalence classes C G ZjS\, 2 it 
holds that Vi (C ) = V 2 (C) . 

Given s' 1; s' 2 G 5 such that (s'x,s 2 ) G 5 and given Z\ G Res(s'^) and i? 2 € i?es(s' 2 ) such that z s ' and 
z s ' 2 are related by one of the projections of S, we prove that for all a G A* it holds that: 

prob(CC(z s/i ,a)) = prob(CC(z s > 2 ,a)) 
by proceeding by induction on the length n of a: 

• If n = 0, i.e., a = e, then: 

prob(CC(z s>i ,a)) = 1 = prob(CC(z s ^a)) 

• Let n G N>o and suppose that the result holds for all traces of length m = 0, . . . , n — 1 that label 
computations starting from pairs of states of Z related by one of the projections of S . Assume 
that a = aa' . Given s G S and Z G Res(s), it holds that, whenever z s — > V, then: 

prob(CC(z s ,a)) = £ V(z s .) ■ prob(CC{z s , ,«')) = £ P([^]) • pro&(CC(z s ,, a')) 
z s ,ez [z B ,]e.z/S' 
where S' is a projection of 5 and the factorization of prob(CC(z s > , a')) with respect to the specific 
representative z s > of the equivalence class [z s >] stems from the application of the induction hy- 
pothesis on a' to all states of that equivalence class. Since z s i and z s > 2 are related by a projection 

S\. 2 of S, it follows that, whenever z s / —> T>\, then — % 2? 2 and: 

prob(CC{z s/i ,a)) = T>i([z s >}) ■ prob(CC(z s , ,a')) = 

[z e ,]ez/S 1:3 

= E ^2 ([«»']) • prob(CC(z s ',a')) = prob(CC{z s > 2 ,a)) 

[z.,]£Z/Si,i 
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Figure 18: Two NPLTS models distinguished by ~pB,dis/~PB/~PB,un and identified by ~pRS,dis/~PRs/~PRS,u 



prob(CCC(z s r , a)) = prob{CCC{z s t <i ,a)) 



Therefore s\ CpTr,dis s 2 . 

4. The proof that s\ Cpcs.dis s 2 =>■ s i EpcTr.dis s 2, from which the result follows, is similar to the proof 
of the previous result. We note that: 

• For fully probabilistic models like resolutions, fpr-completed simulations are coarser than 
fpr-bisimulations and finer than fpr-simulations. Since fpr-simulations are fpr-bisimulations over 
these models [10j . also fpr-completed simulations are fpr-bisimulations. 

• In the base case of the induction, it additionally holds that: 

1 if initisi) — init{s' 2 ) = 
if init\s() ^ ^ mit(s' 2 ) 

where init^s^) = iff init(s' 2 ) = because (sijSj) € S and S is a probabilistic set-distribution 
completed simulation. 

• In the general case of the induction, prob(CCC(z sl a)) is expressed recursively in the same way as 
prob(CC(z s ,a)). 

5. The proof that si EpRS.dis «2 «i EpTe-tbt,dis s 2, from which the result follows, is similar to the 
proof of Thm. 6.5(2) in pp. We note that: 

• We exploit the fact that states related by CpRs,dis have the same set of actions labeling their 
outgoing transitions to establish a connection among resolutions of the interaction systems that 
are maximal (remember that states not enjoying that property are trivially distinguished by 

CpTc-tbt,dis)- 

• For fully probabilistic models like maximal resolutions, fpr-ready simulations are coarser than 
fpr-bisimulations and finer than fpr-simulations. Since fpr-simulations are fpr-bisimulations over 
these models [TU], also fpr-ready simulations are fpr-bisimulations. ■ 
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All the inclusions in Thm. l3J"8l are strict: 



Figures [3] and |3] respectively show that for all n e {PS, PCS, PFS, PRS} it holds that ~,r,dis is strictly 
finer than ~ w and ~ w is strictly finer than ^^.u- 



• Figure 18 shows that ^pb.ct' is strictly finer than ^prs.o- for all a e {dis,e, U} and a' £ {dis, e, Un} 
related to a. In particular, si and S2 are not bisimilar because the leftmost state with outgoing 
6-transitions reachable from s\ is not bisimilar to the only state with outgoing 6-transitions reachable 
from S2- 

• Figure [5] shows that ~prs. ct is strictly finer than ~pcs,<t for all a <E {dis, e, U}. In particular, si and S2 
are not ready similar because the leftmost state with outgoing 6-transitions reachable from Sj is not 
ready similar to the only state with outgoing 6-transitions reachable from S2- 

• Figure [6] shows that ^pcs.er is strictly finer than ^ps.er for all a <E {dis,e,U}. In particular, si and S2 
are not completed similar because the rightmost state reachable from s\ after performing a is not 
completed similar to the only state reachable from S2 after performing a. 

• Figure |8] shows that — ps,dis, ^pcs,dis, and ~pRs,dis are strictly finer than — pi-r.dis, ~PCTr,dis, and 
~PTe-tbt,dis, respectively. It holds that si ?^ps,dis S2 (and hence s\ ?^pcs,di s s 2 and si 7^pRs,dis s 2 ) 
because the two states with outgoing 6-transitions reachable from si are not set-distribution similar 
to the only state with outgoing 6-transitions reachable from 82- In constrast, Si ~pTe-tbt dis ^2 (and 
hence s\ ^pcTr.dis $2 and s\ ~pTr,dis S2) because success probabilities are computed in a trace-by-trace 
fashion without adding up over different traces. 

Moreover: 



• ^pcs.dis is incomparable with the five testing equivalences and the twelve decorated-trace equiva- 
lences. Indeed, in Fig. [5] it holds that s% ^pcs.dis *2 ~ as can be seen by taking the preorder that 
pairs states having at least one equally labeled transition - si /pTo-tbt,un S2 (and hence si and S2 
are also distinguished by the other four testing equivalences, the three failure equivalences, and the 
three failure-trace equivalences) - due to the test having an a-transition followed by a c-transition 
leading to success, which results in a maximal resolution with completed trace a when interacting 
with the first process and no maximal resolution with completed trace a when interacting with the 
second process - and Si 7^pR ; un s 2 and Si 9^pRTr,un s 2 (and hence Si and S2 are also distinguished 
by the other two readiness equivalences and the other two ready-trace equivalences) - due to the 
ready pair and ready trace (a, {6}) having maximum probability 1 in the first process and in the 
second process. In contrast, in Fig. [8] it holds that si T^pcs.dis S2 ~ as the two states with outgoing 
6-transitions reachable from s% are not set-distribution completed similar to the only state with out- 
going 6-transitions reachable from S2 - and Sx ^PTc-tbt,dis ^2 (and hence Si and S2 are also identified 
by the other four testing equivalences and the twelve decorated-trace equivalences). 

• ^ps.dis is incomparable with the five testing equivalences, the twelve decorated-trace equivalences, 
and the three completed-trace equivalences. Indeed, in Fig. [6] it holds that si ^ps,dis S2 - as can 
be seen by taking the preorder that pairs states having equally labeled transitions - si 9^pcTr,un s 2 
(and hence si and S2 are also distinguished by the other two completed-trace equivalences, the three 
failure equivalences, and the three failure-trace equivalences) - due to the completed trace a having 
maximum probability 1 in the first process and in the second process - si /pTe-tbt,un S2 (and hence 
si and S2 are also distinguished by the other four testing equivalences) - due to the test having an 
a-transition followed by a 6-transition leading to success, which results in a maximal resolution with 
completed trace a when interacting with the first process and no maximal resolution with completed 
trace a when interacting with the second process - and si /pR.un S2 and s± 7^pRTr,un S2 (and hence 
Si and S2 are also distinguished by the other two readiness equivalences and the other two ready-trace 
equivalences) - due to the ready pair and ready trace (a, 0) having maximum probability 1 in the first 
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process and in the second process. In contrast, in Fig. [8] it holds that si T^ps.dis ^2 ~ as the two 
states with outgoing ^-transitions reachable from s\ are not set-distribution similar to the only state 
with outgoing 6-transitions reachable from s 2 - and s\ ~PTe-tbt,dis S2 (and hence s\ and s 2 are also 
identified by the other four testing equivalences, the twelve decorated-trace equivalences, and the three 
complctcd-tracc equivalences) . 

• and ^tt.u are incomparable with the five testing equivalences and the eighteen trace-based equiva- 
lences for all 7T € {PS,PCS,PFS,PRS}. Indeed, in Fig. [7] it holds that s x 

~prs s 2 (and hence si and 

s 2 are also identified by the other seven simulation-based equivalences) - as can be seen by taking the 
preorder that pairs states having equally labeled transitions leading to the same distribution - and 
Si T^pTr.un s 2i $1 7^PR,un S2, and Si 7^pRTr,un S2 (and hence Si and S2 are also distinguished by the 
other fifteen trace-based equivalences and the five testing equivalences) - due to the trace a be, the 
ready pair (a b c, 0), and the ready trace (a, {&}) (6, {c}) (c, 0) having maximum probability 0.68 in the 
first process and 0.61 in the second process. In contrast, in Fig. [8] it holds that si /ps,un s 2 (and 
hence si and S2 are also distinguished by the other seven simulation-based equivalences) - as the two 
states with outgoing 6-transitions reachable from si are not U-similar to the only state with outgoing 
6-transitions reachable from s 2 ~~ and Si ~pTe-tbt,dis S2 (and hence Si and S2 are also identified by the 
other four testing equivalences and the eighteen trace-based equivalences). 

• ^ PB and ^pB,un are incomparable with ^^^is for all tt € {PS, PCS, PFS, PRS}, because in Fig. [3] 
it holds that si ~pb s 2 (and hence s\ ~pB,un s 2 ) and si 7^ps,dis s 2 (and hence si /pcs.dis «2, 



si 7^PFS,dis s 2 , and si /pRs.dis s 2 ), while in Fig. 18 it holds that si / PB ,un s 2 (and hence si /pb s 2 



and si -p RS ,di S s 2 (and hence si ~ PF s,di S s 2 , s x ~ PC s,di S s 2 , and si ~ PS ,dis s 2 ). 

• ~prs, ~pfs, ^prs,u, and — pfs.u are incomparable with — pcs,dis and — ps,dis, because in Fig. [3] it 
holds that s 1 ~ PRS s 2 (and hence Si ~ PFS s 2 , s a ~pr S ,u s 2 , and Si ~p FS ,u s 2 ) and Si ?^ps,dis «2 (and 
hence Si / P cs,dis s 2 ), while in Fig.[5]it holds that Si t^pfs,u s 2 (and hence Si / P r S ,u s 2 , Si / PFS «2) 
and si t^prs s 2 ) and si ~ PC s,dis s 2 (and hence Si ~ PS ,dis s 2 ). 

• ~pcs and ~pcs,u are incomparable with ~ps,dis, because in Fig. [3] it holds that s\ ~pcs s 2 (and 
hence si ~pcs,u s 2 ) and si 7^ps,dis s 2 , while in Fig. [6] it holds that si ~ps,dis s 2 and s% t^pcs.u s 2 
(and hence si t^pcs ^2)- 

5.^. A Full Spectrum 

The spectum of all the considered equivalences is depicted in Fig. [l9j We have followed the same graphical 
conventions mentioned at the beginning of Sect. [3] with adjacency of boxes within the same fragment having 
the same meaning as double arrows connecting boxes of different fragments, i.e., concidence. Notice that 
there are many more dashed boxes (corresponding to equivalences introduced in this paper) than in Fig. [I] 



The top fragment of the spectrum in Fig. 19 refers to the considered equivalences that are based on fully 
matching resolutions. Similar to the spectrum for fully probabilistic processes in \12\ 15]. many equivalences 
collapse into a single one; in particular, ready-simulation semantics coincides with failure-simulation seman- 
tics, ready-trace semantics coincides with failure-trace semantics, and readiness semantics coincides with 
failure semantics. Different from the fully probabilistic spectrum, in the top fragment we have that the var- 
ious simulation-based semantics do not coincide with bisimulation semantics jTU] and that completed-trace 
semantics does not coincide with trace semantics JT2] [8] . Moreover, testing semantics turns out to be finer 
than failure semantics. 

The central fragment and the bottom fragment of the spectrum in Fig. [19] instead refer to the consid- 
ered equivalences that are based on partially matching resolutions and extremal probabilities, respectively. 
These equivalences are coarser than those in the top fragment and do not flatten the specificity of the 
intuition behind the original definition of the behavioral equivalences for LTS models. Therefore, the two 
fragments at hand preserve much of the original spectrum in |19) for fully nondeterministic processes, with 
testing semantics being coarser than failure semantics. It is worth noting the coincidence of corresponding 
simulation-based equivalences in the two fragments (due to the fact that the comparison operator < is used 
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Figure 19: Full spectrum of strong behavioral equivalences for finitely-branching NPLTS models (deterministic schedulers) 



in their definitions), whereas this is not the case for the two bisimulation equivalences (as the comparison 
operator = is used instead in their definitions). We finally stress the isolation of bisimulation semantics, 
simulation semantics, ready-trace semantics, and readiness semantics in the two fragments, as well as the 
partial isolation of ~PTe,un- 

4. Deterministic Schedulers vs. Randomized Schedulers 

So far, we have considered strong equivalences for NPLTS models that compare probabilities calculated after 
resolving nondeterminism by means of deterministic schedulers. We now examine the case of randomized 
schedulers. Each of them selects at each state a convex combination of equally labeled transitions, which 
is called a combined transition [15] . Notice that a deterministic scheduler is a special case of randomized 
scheduler in which every selected combination involves a single ordinary transition. 

For each strong behavioral equivalence ~ introduced so far, we denote by ~ ct the corresponding equiva- 
lence based on combined transitions (ct-equivalence for short), i.e., in which nondeterminism is resolved by 
means of randomized schedulers. For the eighteen trace-based equivalences and the five testing equivalences, 
the only modification in their definitions is the use of Res ct in place of Res, where Res ct is the set of resolu- 
tions of a state obtained via a randomized scheduler. For the fifteen (bi)simulation-based equivalences, the 
only modification in their definitions is the direct use of combined transitions (denoted by — > c ) instead of 
ordinary transitions. 

All the results connecting the various equivalences and the counterexamples showing strict inclusion or 
incomparability are still valid for the ct-equi valences. The only exceptions are the counterexamples based 
on Fig. [4j as the central o/fer-transition of s\ can now be obtained as a convex combination of the two 
Ojffer-transitions of S2 with both coefficients equal to 0.5. Indeed, no ct-equivalence can be finer than the 
corresponding equivalence arising from deterministic schedulers, as matching ordinary transitions induce 
matching combined transitions. 
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While every ct-equivalence based on fully matching resolutions is still strictly finer than the corresponding 
ct-equivalences based on partially matching resolutions and extremal probabilities (the counterexample 
provided by Fig.|3]is still valid), it turns out that every ct-equivalence based on partially matching resolutions 
coincides with the corresponding ct-equivalence based on extremal probabilities. In other words, when 
moving to randomized schedulers, the central fragment and the bottom fragment of the spectrum in Fig. [19] 
collapse. Moreover, it holds that every ct-equivalence based on extremal probabilities coincides with the 



corresponding equivalence in the bottom fragment of the spectrum in Fig. 19 
Theorem 4.1. It holds that: 

1. ~ C ^ ct for every considered equivalence ~. 

2. ~^ di8 C ~* = ~£ un = ^ m for all tt G {PB, PTc-tbt, PRTr, PFTr, PR, PF, PCTr, PTr} over image- 
finite NPLTS models. 

3- ~£ diB C ~J = ~£ u = ~ IjU for all tt G {PS, PCS, PFS, PRS} over image-finite NPLTS models. 
4. ~p Te un — ^PTc.un over image-finite NPLTS models. 



Proof Let (S,A, — ► ) be an NPLTS and s u s 2 G S: 

1. Since matching ordinary transitions induce matching combined transitions, ^ ct performs at least the 
same identifications as ~. 

2. The proof of the fact that ~^ t dis C C ~^* un is similar to the proof of Thm. 6.5(1) in [T] when 
tt = PB, to the proof of Thm. 3.5(2) in [J when tt = PTe-tbt, and to the proof of Thm. 3.5 in [T] in 
all the other cases. Moreover, it holds that ~£ t un Q (and hence — ~J un ) when the NPLTS is 
image finite. 

Consider the case tt = PB and suppose that s% ~p B un S2- This means that there exists a 
ct-probabilistic Un-bisimulation B over S such that (si,S2) G B. Given Q G 2 S / B and a 6 A, as- 
sume that there exists s% — X>i such that 2?i(lJ Q) — p. Since (si, S2) € *6 and the NPLTS is image 
finite, there exist s 2 — 23 2 such that T>' 2 ({J Q) = p' < p and s 2 — ^-> c 23 2 sucn that T>' 2 ' ((J 5) = p" > p. 
If p' = p (resp. p" = p), then si-^Di is trivially matched by S2 — >c ©2 (resp. S2 — tcD'i) with 
respect to ~p B when considering . Assume that p' < p < p" and note that s 2 — -» c (a? ■ 2? 2 + 2/ • 23 2 ) 
for all 1,!/ e ]Riq x] such that a; + y = 1. Indeed, directly from the definition of combined transition, 
we have that: 

• Since s 2 -^* c 23 2 , there exist n £ N>o, {p^ G R]o,i] I 1 < * < and {S2 -^-> 23^ | 1 < i < n} such 
that jyU P'i = 1 and £? =1 = V' 2 . 

• Since s 2 -^c 23 2 ', there exist m G N >0 , {p" G M ]0 .i] I 1 < 3 < m], and {s 2 23V | 1 < j < m} 
such that E™ =1 = 1 and ^ J# • ^ = 23 2 '. 

Hence, (a; • 23 2 + y ■ 23 2 ' ) can be obtained from the appropriate combination of: 

{s 2 23< I 1 < i < n} U {s 2 23V | 1 < j < m} 

with coefficients: 

{a: • p< G M ]0 ,i] | 1 < i < n} U {y ■ p] G K ]0 ,i] I 1 < J < m} 
If we take z = and y = then s 2 • 23 2 + ^ • 23") with: 

(^•23 2 + ^-23 2 ') (US) = f^-V' 2 (Ug) + f^-VUUQ) 

= v" -v . v ' 1 p-p' . _ p' -p" -p-p' +p-p" -p' -p" 
p" _pi F pit— pi F pi 1 —pi 

= p-$$ = p = ViQJS) 

Due to the generality of (si, S2) G a <E j4, and £/ G 2 s / e , it turns out that B is also a ct-probabilistic 
bisimulation, i.e., si ~p B s 2 . 

The proof for the other seven cases is similar, with actions being replaced by traces and transitions be- 
ing replaced by resolutions. For instance, suppose that si ~p Tr un s 2- Given a £ A* , assume that there 
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exists Z\ £ Res^(si) such that prob(CC(z Sl , a)) — p. Since s\ U n s 2 and the NPLTS is image fi- 
nite, there exist Z 2 , Z 2 £ Res c *(s 2 ) such that prob(CC(z' S2 , a)) = p' < p and prob(CC(z' ! ! 2 , a)) = p" > p. 
Hp' = p (resp. p" = p), then Z\ is trivially matched by Z 2 (resp. Z 2 ) with respect to ~p Tr when 
considering a. Assume that p' < p < p" and consider the resolution Z 2 = x ■ Z 2 + y ■ Z 2 of s 2 defined 
as follows for x, y £ K]o,i] such that x + y = 1. Since p' ^ p" and they both refer to the probabil- 
ity of performing an a-compatible computation from s 2l the two resolutions Z 2 and Z 2 of s 2 differ 
at least in one point in which the nondeterministic choice between two transitions labeled with the 
same action occurring in a has been solved differently. We obtain Z 2 from Z 2 and Z 2 by combining 
the two different transitions into a single one with coefficients x and y for their target distributions, 
respectively, in the first of those points. If we take x = p„Zp> an d y = p,7l p i , then: 

P rob(CC(z S21 a)) = ■ prob(CC(z' S2 ,a)) + ■ prob{CC{z'^a)) 

_ p"-p / , p-p' n _ p'-p"-p-p'+p-p"-p'-p" 
— p "-pi v * p"- p ' P — p"- P ' 

= V P ik$ = P = prob(CC(z Sl ,a)) 
Due to the generality of a £ A* , it turns out that Si s 2 . 

The fact that ~ IjUn C ~J un stems from the first result of this theorem. Moreover, it holds that 



7r,un 

J< Kun £ ^7r,un (and hence ~^ U n = ^Tr.un) when the NPLTS is image finite. 



Consider the case ir = PB and suppose that si ~p Bun s 2 . This means that there exists a 
ct-probabilistic Un-bisimulation B over S such that (si, s 2 ) £ B. In other words, whenever (s[, s' 2 ) £ B, 
then for all Q £ 2 5/e and a £ A it holds that s[ iff s' 2 and: 

U ViiUG) = U v 2 (\jg) 
n ^({jg) = n v 2 ((jg) 

s[ — > C T>! s' 2 > C V 2 

Since the NPLTS is image finite, given Q £ 2 s ' ' B , a £ A, and s £ S having at least one outgoing 
a-transition, it holds that: 

U v(UG) = U v<UG) 

s a > D s a > D 

s V s V 

because the supremum and the infimum on the left are respectively achieved by two ordinary 
a-transitions of s. In fact, let V u (resp. T> n ) be the target of an a-transition of s assigning the 
maximum (resp. minimum) value to 1J G among all the a-transitions of s and consider an arbitrary 
convex combination of a subset {s T>i | 1 < i < n} of those transitions, with coefficients pi, . . . ,p n 
and n £ N >0 . Then: 

n n 

EPi-A(Ue) < Eft-^u(U^) = ^u(Uff) 

i=i i=i 

n n 

E Pi -VitUS) > Eft-^nOJS) = ^n(US) 

i=i i=i 

As a consequence, whenever (s[, s 2 ) £ B, then for all a £ A and G £ 2 S/ ' e it holds that s[ — iff s 2 
and: 

U ©i(Ue) = U ZMUS) 

s'j V 1 s' 2 V 2 

n v^g) = n v 2 (ug) 

s[ — — > T>! s' 2 — — > X> 2 

This means that is also a probabilistic Un-bisimulation, i.e., si ~pB,un s 2- 

The proof for the other seven cases is similar, with actions being replaced by traces and transitions 
being replaced by resolutions. For instance, suppose that si ^pV un s 2- This means that for all 
a£A*: 
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U P rob(CC(z Sl ,a)) = |J prob(CC(z S21 a)) 

Z 1 eRes c ^(s 1 ) Z 2 eRes^(s 2 ) 

PI prob(CC(z Sl ,a)) = |~1 prob(CC(z S2 , a)) 

Z 1 eRes c ^(s 1 ) Z 2 eR,es^(s 2 ) 

Given a e A* and s e S, it holds that: 

U pro&(CC(^,a)) = U pr &(CC(z s ,a)) 

f] pro&(CC(z s ,a)) = |~1 prob(CC{z s , a)) 

ZeRes^(s) Z£Res a (s) 

In fact, observing that: 

U prob{CC(z s ,a)) > |J pro&(CC(z s , a)) 

because the set of probabilities on the left contains the set of probabilities on the right (a dual property 
based on < holds for infima), we prove that: 

U prob(CC{z s ,a)) < \J prob(CC(z s ,a)) 

ZeRes^(s) Z£Res a (s) 

by proceeding by induction on the length n of a (a dual property based on > can be proved for infima): 

• If n = 0, i.e., a = e, then: 

[J prob(CC(z Sl a)) = 1 = |J prob(CC(z s ,a)) 

ZeRes^(s) Z£Res a (s) 

• Let n € N>o and suppose that the property holds for all traces of length m = 0, . . . ,n — 1. 
Assume that a = a a' '. If s has no outgoing a-transitions (an outgoing non-a-transition in the 
case of infima), then: 

U prob{CC(z Sl a)) = = |J prob(CC(z s ,a)) 

ZeRes^(s) Z£Res a (s) 

otherwise: 

U prob(CC(z s ,a)) = |J £ ( V(s') • |J prob(CC(z' s „ a'))) 

Z^Res^(s) s-^ c X> s ' eS \ Z>£Res^,(s>) J 

< U E (W)" U prob{CC{z' sll a')) ) 

U E (Efe-^(^))- U pr &(CC«„ a '))) 

»A t Er = iP.-5. S ' ES V =1 Z>eRes a ,(s>) J 

U Eft' E U P rob(CC(z' s „a')))) 

^ c Er=iP.^' =1 V 5 ' 65 V Z>eRes a ,(s>) J J 

mm// \ 

< U Eft-U E W)' U pr &(CC(^,a')) 

sA c Er = iP.^. 1=1 »=i \s'es \ z'efle Sct ,( s ') / 

U U ( E (W)- U prob{CC{z' s ,,a'))]\ 

s J ^oJ2T = iP t -Vi i=1 \ S ' eS \ Z'eRes a ,{s<) )) 

= U E (W)- U pro^CC^, ,<*')) J 
U pro6(CC(z s ,a)) 

-Z£fles Q (s) 

where in the second line we have exploited the induction hypothesis and in the subsequent lines 
it holds that m e N>o and Y^iLiPi = 1- 

As a consequence, for all aei*: 

LI prob(CC(z Sl ,a)) = \J prob(CC(z S21 a)) 

Z 1 £Res a (s 1 ) Z 2 £Res a (s 2 ) 

[I prob(CC(z Sl ,a)) = |~1 prob(CC(z S2 , a)) 

Zi&Res a (s 1 ) Z 2 £Res a (s 2 ) 
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This means that s\ ~pTr.un S2- 

3. The proof of the fact that ~£ dis C _ ^ct^ is similar to the proof of Thm. |3.18|^1). 

The proof of the fact that ^^* u = ~7r,u is similar to the proof of the corresponding part of the second 
result of this theorem for bisimulation semantics. 

4. Suppose that s± ~p Tc un s 2- This means that for every NPT T — (O, A, — >f) with initial state o € O: 

[J prob(SC(z Slt0 )) = [J prob(SC(z S2t0 )) 

2i6-Res^ ax (s!,o) Z 2 £Res^ x (s 2 ,o) 

PI prob(SC(z Slt0 )) = [I prob(SC(z S2 . )) 

2iG-Res^ ax (si,o) Z 2 £Res^ ax (s 2 ,o) 

Given an NPT T = {O, A, — >f) with initial state o E O and s € S, it holds that: 

U prob(SC(z s ^ )) = [J pro&(5C(z Sj0 )) 

Z£Res^ ax (s,o) 2:e-Res ma .x(s,o) 

PI pro6(5C(z S:D )) = [I prob(SC(z Si0 )) 

ZeRes<£ ax (s,o) ZeRes max (s,o) 

In fact, observing that: 

U prob(SC(z St0 )) > U prob{SC(z Si0 )) 

ZeRes<£ ax (s,o) Z£Res ms . x (s,o) 

because the set of probabilities on the left contains the set of probabilities on the right (a dual property 
based on < holds for infima), we prove that: 

U prob(SC(z St0 )) < U prob{SC(z Si0 )) 

ZeRes^ ax (s,o) 2e-Res max (s,o) 

by proceeding by induction on the length n of the longest successful computation from (s, o), which is 
finite because T is finite (a dual property based on > can be proved for infima) : 

• If n = 0, i.e., o = uj, then: 

U prob{SC(z s . )) = 1 = U prob(SC{z s , )) 

Z£Res^\ ax (s,o) ZeRes mB , x {s,o) 

• Let n G N>o and suppose that the property holds for all configurations from which the longest 
successful computation has length m = 0, . . . , n — 1. Then: 

U prob(SC(z s , )) = U E U prob(SC(z' slo ,))) 

ZeRes^ ax (s,o) Sl +0 t> (s',o')&SxO \ Z'eRes^ x (s' ,o') J 

< U E (W,o0- U prob(SC(z' s , y ))) 

( Si0 )^ c £> (s',o')eSxO \ Z'eRes m&x {s' ,o') ) 

(m 
E(Pi-^',o'))- U proW^,, 
»=1 Z'ee-Res maJt (s',o') 

U tpi-( E U pro6(«5C(^ i0 

( 5;0 )_^ >c 1=1 \(s',o')e5xO \ Z'ei?,es max (s',o') 

mm/ I 

< U Eft'U E U pro6(5C0 

U Of E (W,°')- U prob(SC(z>, >0 ,))) 

(s,o)-^y c T.T=lPi- V i 4=1 \( s ''°') eSx0 V Z>£Res„ lax (s',o') j 

= U E (v'is',0')- U pr &(5C«, o ,))) 

(s,o) AD' (s'/)eSxO \ Z'efles max (s',o') / 

U prob(SC(z s , )) 

Z£Res max (s,o) 

where in the second line we have exploited the induction hypothesis and in the subsequent lines 
it holds that m £ N>o and E2=i Pi = 

As a consequence, for every NPT T = (O, A, — >j-) with initial state o e O: 
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U P rob(SC(z Su0 j) = U prob(SC{z S2 . )) 

2^iGRes msix (s 1 ,o) -2 2 G-Res max (s 2 ,o) 

|-| P rob(SC(z Su0 )) = |-| pr 6(5C(z S2 , o )) 

Zi£-Res max (s 1 ,o) 2 2 e-Res max (s 2 ,o) 

This means that s\ ^pTc,un «2- ■ 
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